Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
File: CFr4G5nr9ILzxrU1Hiniii4gs5g.mft (raw, json)
Hash identifier: RsmJLAJXgvoTldChaxwi5wtf8ejITD/k2rDrochHGqY=
Subject key identifier: D4:6A:4D:D9:9C:7A:91:6D:7B:1E:A2:23:4A:0C:CD:75:2D:FD:73:1A
Authority key identifier: 08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
Certificate issuer: /CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Certificate serial: 01984C2F85D44582899B74DED26574AE2B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
Manifest number: 03B1
Signing time: Sun 27 Jul 2025 14:00:39 +0000
Manifest this update: Sun 27 Jul 2025 14:00:39 +0000
Manifest next update: Mon 28 Jul 2025 14:00:39 +0000
Files and hashes: 1: CFr4G5nr9ILzxrU1Hiniii4gs5g.crl (hash: 1rLrN3FrNVMEOY6bwDfNea5fxWgjbOG1f/Lb8SBN4xk=)
2: UmoMMcgLYQ1NME06W-RaoSwOLvs.roa (hash: DXndsPFPDd7x23rCZc6g3GNT4ZixvQ1GmrG9rBzETuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:85:d4:45:82:89:9b:74:de:d2:65:74:ae:2b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=085af81b99ebf482f3c6b5351e29e28a2e20b398
Validity
Not Before: Jul 27 14:00:39 2025 GMT
Not After : Jul 28 14:00:39 2025 GMT
Subject: CN=d46a4dd99c7a916d7b1ea2234a0ccd752dfd731a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:37:69:73:d3:9f:f1:b8:8c:95:99:d2:88:
9f:b3:a1:06:48:17:33:06:1e:a9:03:0b:2d:92:f7:
af:80:9d:fb:14:d4:e7:d9:5b:a3:c3:09:48:07:a7:
aa:f6:2a:f4:03:54:f5:dd:b8:a8:e7:bf:fb:e2:30:
19:54:fe:54:f0:47:44:23:d8:c9:98:44:e8:c3:f2:
91:7a:16:e1:af:a5:5e:d1:0d:7f:5b:70:cc:24:53:
fd:0e:4a:bc:7c:1e:2a:b3:8f:d7:cd:07:63:94:90:
ca:07:01:11:92:e1:73:ab:96:56:39:a1:a6:02:b0:
42:1f:0f:4c:1e:47:04:26:f2:ac:59:85:4e:d4:bd:
23:b4:49:99:3d:5c:c7:d8:09:d6:b2:33:4d:4a:1c:
32:04:e4:76:8b:67:7b:c1:01:5e:63:bb:46:1b:31:
10:fa:e5:21:91:54:d5:b5:0e:bb:61:58:29:70:d0:
8d:90:d4:04:95:ca:14:bd:2f:b9:32:7f:c8:40:1c:
3a:b3:f7:be:26:2d:e6:2b:17:b8:a9:5c:25:d7:ab:
75:b6:a0:8f:75:5b:d4:48:af:09:54:19:a4:98:fa:
68:95:d7:b1:59:d4:90:ae:41:9e:60:c7:fd:7b:71:
fd:5b:9f:8e:9b:c1:a2:4a:d5:08:aa:fe:36:53:d1:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:4D:D9:9C:7A:91:6D:7B:1E:A2:23:4A:0C:CD:75:2D:FD:73:1A
X509v3 Authority Key Identifier:
keyid:08:5A:F8:1B:99:EB:F4:82:F3:C6:B5:35:1E:29:E2:8A:2E:20:B3:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFr4G5nr9ILzxrU1Hiniii4gs5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0840e9-7199-4e03-84fd-c28d14c7b731/1/CFr4G5nr9ILzxrU1Hiniii4gs5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1d:82:0b:7f:c2:20:62:02:7b:a2:8d:96:1d:d6:a2:93:e5:
46:bf:6b:20:89:25:de:06:f6:3e:27:e2:c2:11:28:8a:a3:78:
9c:4b:75:fc:0f:78:f6:5d:51:72:3c:d3:0c:da:54:39:0e:9c:
3a:b7:f5:92:90:7f:89:80:a8:e6:3d:d0:05:66:6e:48:90:49:
01:a6:fb:e8:67:13:d9:39:77:8e:5e:9d:d8:f3:07:5f:fc:27:
f2:97:e2:0b:2a:61:92:d9:0a:60:28:26:30:91:ef:72:a7:33:
33:8e:c8:67:49:57:59:ad:d1:37:5c:7c:6e:a1:e4:09:eb:75:
d1:cc:a8:68:5d:83:83:1d:5d:6b:db:b8:50:c0:74:ee:5c:21:
4f:40:ea:e3:ce:3a:ba:30:db:3b:58:2b:bc:37:19:cf:9d:3e:
85:6b:47:bc:6d:a2:15:ba:45:18:42:89:fb:1b:75:9d:10:42:
cd:53:33:68:34:67:1e:4c:d3:32:fc:a2:2f:52:eb:8d:8c:00:
24:f6:53:9f:d1:9e:ae:82:b8:13:ff:ce:47:54:72:7a:fe:6c:
5e:7a:79:58:c3:04:6f:bb:02:c0:d5:2d:75:f9:91:23:f8:5b:
38:b3:b1:da:4e:45:3e:2b:f7:5a:a2:6b:6a:32:5f:d2:39:b4:
40:3b:99:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:38:05 2025 by rpki-client